$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa File: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (raw, json) Hash identifier: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI= Subject key identifier: C6:41:70:87:BE:3D:67:88:C5:00:03:67:8B:94:69:68:53:AE:EA:B5 Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 02598F873F228F04410289CEC38BA2672A93EE5F Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa Signing time: Mon 17 Mar 2025 04:01:22 +0000 ROA not before: Mon 17 Mar 2025 03:56:22 +0000 ROA not after: Mon 16 Mar 2026 04:01:22 +0000 asID: 63488 IP address blocks: 103.233.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 20:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:59:8f:87:3f:22:8f:04:41:02:89:ce:c3:8b:a2:67:2a:93:ee:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Mar 17 03:56:22 2025 GMT Not After : Mar 16 04:01:22 2026 GMT Subject: CN=C6417087BE3D6788C50003678B94696853AEEAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:d0:d8:2f:1b:7e:96:83:f1:41:fe:37:ee: ff:20:25:1e:79:a1:67:f2:1b:e4:bb:78:2b:75:32: 83:05:ac:7c:5a:d1:1e:0a:5e:f5:e9:e3:5f:ec:b8: 3d:30:f1:b1:1e:5d:4f:54:9b:1b:72:02:c0:80:27: d1:d1:a4:f9:eb:8f:1e:9a:4d:ad:ce:a7:06:ad:49: 3a:5a:76:28:e4:32:fb:b4:3a:0e:a9:1e:d1:0d:eb: d7:de:a7:6f:e8:e9:a8:9b:cd:30:1e:da:ee:56:b3: 1f:f7:e2:4a:b1:f8:68:14:3d:d5:91:e0:71:0b:cb: ef:9e:e1:77:eb:d1:fd:2d:88:d3:8d:3d:02:e1:24: 96:6f:d0:71:b6:3e:29:a0:84:8f:15:01:cb:af:d2: b8:c5:34:53:27:43:55:e6:85:f7:6f:32:20:eb:bf: c2:6d:e0:b9:62:79:42:0f:e6:4e:94:2f:03:45:94: a2:d9:61:63:80:6f:ba:b4:bc:35:5d:f5:9f:1b:34: d9:d3:3a:ea:07:f6:3e:0e:85:26:1e:a5:c4:24:8d: 56:82:c0:87:e7:4e:1d:76:92:d2:de:7d:fd:85:86: 09:de:82:64:f3:9b:ce:b6:87:3a:e4:de:dd:c9:8a: 10:2a:46:f4:37:bc:ef:6f:db:d9:80:80:5a:26:1a: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:41:70:87:BE:3D:67:88:C5:00:03:67:8B:94:69:68:53:AE:EA:B5 X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.233.111.0/24 Signature Algorithm: sha256WithRSAEncryption 12:7a:18:87:d7:6d:ca:1b:28:c3:45:d5:ff:fe:77:aa:c4:77: aa:da:7e:59:f4:69:24:cb:99:e6:b6:fc:13:23:21:05:2c:35: 6d:3a:91:9f:9d:1c:f7:bf:62:c0:4c:f8:d0:de:db:a4:9d:52: 62:7c:f2:29:be:2f:b1:98:92:9c:e6:26:63:1d:c2:eb:28:ce: f6:2d:99:0c:da:b6:89:ec:fb:d3:57:90:bb:77:2a:d4:ff:39: 96:3a:0d:d4:83:95:97:23:bf:8b:ec:0d:90:3e:56:6e:2f:ae: 30:27:b2:4a:7f:34:b0:a6:54:b7:98:d9:35:af:fc:2a:87:4a: 8d:bd:0b:10:d2:fb:8d:c0:ec:19:a9:d0:47:7e:c4:f3:e2:a9: a2:40:8d:73:50:f0:9f:fd:ba:f8:a0:d4:e3:46:7c:22:d1:b5: e7:0e:ee:1b:88:e2:57:26:34:0a:ea:64:e7:54:2a:eb:87:fd: 14:70:ae:22:0e:47:16:2c:4c:50:5d:47:56:bb:33:fb:42:0c: 18:39:a5:59:ee:f9:6d:e2:91:a8:c0:ca:87:76:7d:00:58:93: 3a:74:e5:cd:8f:a2:64:54:57:db:ce:98:3d:40:97:80:28:fa: 2d:63:97:be:23:7d:72:bd:c5:4e:d7:8f:09:c9:fa:69:64:3b: b1:18:7e:26 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAlmPhz8ijwRBAonOw4uiZyqT7l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTAzMTcwMzU2MjJaFw0yNjAzMTYwNDAxMjJaMDMxMTAvBgNV BAMTKEM2NDE3MDg3QkUzRDY3ODhDNTAwMDM2NzhCOTQ2OTY4NTNBRUVBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiNDYLxt+loPxQf437v8gJR55 oWfyG+S7eCt1MoMFrHxa0R4KXvXp41/suD0w8bEeXU9UmxtyAsCAJ9HRpPnrjx6a Ta3OpwatSTpadijkMvu0Og6pHtEN69fep2/o6aibzTAe2u5Wsx/34kqx+GgUPdWR 4HELy++e4Xfr0f0tiNONPQLhJJZv0HG2PimghI8VAcuv0rjFNFMnQ1XmhfdvMiDr v8Jt4LlieUIP5k6ULwNFlKLZYWOAb7q0vDVd9Z8bNNnTOuoH9j4OhSYepcQkjVaC wIfnTh12ktLeff2FhgnegmTzm862hzrk3t3JihAqRvQ3vO9v29mAgFomGs0lAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxkFwh749Z4jFAANni5RpaFOu6rUwHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZDQ2ZjgyLWNmMTEtNGUzMi1i MDUxLTZhYzMzNGE5MjYyMi8wLzMxMzAzMzJlMzIzMzMzMmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+lvMA0GCSqG SIb3DQEBCwUAA4IBAQASehiH123KGyjDRdX//neqxHeq2n5Z9Gkky5nmtvwTIyEF LDVtOpGfnRz3v2LATPjQ3tuknVJifPIpvi+xmJKc5iZjHcLrKM72LZkM2raJ7PvT V5C7dyrU/zmWOg3Ug5WXI7+L7A2QPlZuL64wJ7JKfzSwplS3mNk1r/wqh0qNvQsQ 0vuNwOwZqdBHfsTz4qmiQI1zUPCf/br4oNTjRnwi0bXnDu4biOJXJjQK6mTnVCrr h/0UcK4iDkcWLExQXUdWuzP7QgwYOaVZ7vlt4pGowMqHdn0AWJM6dOXNj6JkVFfb zpg9QJeAKPotY5e+I31yvcVO148JyfppZDuxGH4m -----END CERTIFICATE-----Generated at Fri May 9 03:50:26 2025 by rpki-client